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(57) Abstract: 

PURPOSE: To provide the circuit executing the power 
residue arithmetic operation and the residue 
multiplication at high speed with smaller circuit by 
repeatedly executing the residue multiplication using 
both modulo N and prime R of the residue. 

CONSTITUTION: In the residue arithmetic circuit, the 
outputs for input pairs (A, RR), (B r RR), (AR, BR) (TR, 
1) are AR, BR, TR, and Q. In this case, the power 
residue arithmetic operation and the residue 
multiplication are executed by repeating the operation 
of Z=X.Y.R _1 mod N. Therefore, the required arithmetic 
operation is executed by the same or similar type 
arithmetic circuit. In performing the arithmetic 
operation with the use of the Montgomery residue 
multiplication Z=X.Y.R- 1 modN=(X.Y+S.N)/R, in this case, 
S=X.Y.N , modN, the residue multiplication and the power 
residue arithmetic operation can be executed while 
simply repeating the Montgomery residue multiplication 
by using the input value satisfying the condition. 
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[«/£] *^*Q=A • B mod NRtf 
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f&£Z=U- V- R' 1 mod N©»Dfil/K*D«a-r 
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I 

imnutomm 

A- J3 mod NSrfclflbT, a«rt#©»#fls*fctt« 
T, Z = U • V • R->«od N^»tTti}*«^» 

®£ i ^utw* 

At, Ri = R 2 mod N&«5ffi»Ri £*A*LT. A 
i =A- R*-R" 1 modN 

Bt, ME£#Ri tZXJlVX. Bi = B- Ri-R-* 
mod N%mi]2i£. 

B*Sn*:»EAi &WEBi ££A#l/T, T, =A 
t-Bi - R _1 mod NfcfflA*1i\ 

- 1 mod N&QtLTtb^^itSrifCckD, ilftEKA 
HSJJlQ^A- B mod N^HffT^-(h^#^tT^Bt 

[■MSB 2] N&ttifSMtM, efcBT*-*** 
C=M«mod NSaffll/T, amrt«<D*# 

A^x-^U, VfcjfcfbT, N£*T**J»R8JBV* 
T% Z=U • V ■ R -1 mod N «**LTffl:&T*** 

SBHWraWcttUT, Mi, Ri =R 2 mod N£S5gft 
Ri fc&Afll/C* 

Mi =M- Ri-R 1 modN^fflrtSi^ 

OWmmZCi =R«-R" 1 mod NtlT> H^feH 

K«#»K^*LTCi tMi ifcAr&LT. Ct-Mi-R 
- 1 modNfcSrfcfcCi £LTtB*l£ii\ 

l2^g^^LT2^CDA^7 ; -^ibT^Ci £A 
*LT, Ci-Ci-R-- mod N££rfcfcCi tUTW* 

^T(D^IBe* fc^*«M©*7*K:, ftfrESBMBK: 
SJLTCi tft&lt&\msX* C = Ci-l- R" 1 m 
od NSfflflSti:*££fc:.i;0, ttE^#*«*tR»C 
=M« mod N££frT* 
tt. 

SQ^ftlF: C=M«mod Nfc#9»bT, a»rt^<0«P^ 
ft*fctt«[*€fT3fe 5 «raa«#fefc*5V>T, 

T, Z = U • V • R-'nod N^SbTtBM-Sag 

S«tt*«K*fLT, Mi, Ri = R» mod Nfc££& 
Ri ££A^UT> 

Mi =M- Rt • R" 1 nodN£tHft3«. 



(2) W5-3 24277 

2 

e©2i««*e= (e'.e'- 1 ,-, e 1 3 fcU Ci 
OfflHMfcCi =Ri-R 1 mod NfcbT, 
yhfrSOc' ®tt£{E«3T, e 1 = 1 testate, M 
fi*JMBfc»L>TCi £Mi £&A*UT, Ct-Mt-R 
- 1 modN&grfcfcC* fcUTffl**-*, 

E^gtgP^LT2 0(DA^7 i -'^iUT^^Mi £A 
Mi-Mi-R" 1 mod NfcfrfcfcMi fcUTffl* 

10 ftTCDMBe. 1 te^*««©*7«fc* ttBMJHBfc 
MUTCi ££!&1£:£A;*)UT, C = Ci-l- R" 1 m 

od N&ffi#si£&e:£tc«fcD, ^ta^^^s^c 
=m« mod N^ff-rs^i^^t'rs^am^ 
tk. 

MMOt4] nmm»mz. g»Ri tjgfti^srA 

*LT, UARrl • R' 1 modN&Ci CDla)Sra£T£ 

c t a** 2 & * v>ii 3 fcE«o>Wf#am 

[11*3153 n£N<2 B USES* 
20 &mz&^T, AUr-PU. V#> u=lfr 

Or>l, ££Ji, u>1^0r=u+l^u, .r{: 
MbT\ R = 2' + ' , U<2»*« , V<2 0 + « Zmtth 

l/fc»*fR»Q=A« B mod N£*iJffiUT> aAA# 

XJlZmtAmSmmR&VA- R mod N€a»UT 
30 ^©»*ftAi tb, 

A^J^nfcBR^MER^DB- R mod NfcSWUT 

MEtStWiB^Ai , Bi Rl/ttERlC*^*, Ai-B» 

• R" 1 mod Nft*a&T*©»*STt tU 

M^T. tt&ER t. fctfc 0 Ti • R" 1 mod NSS»U 

WET. Ai &ffiS©K»vlcJ:*iS 

EA» ©vVf^h#©»«> Y=2' tUT, 
Ti =( Ti-i +Ai-Bi-Y+Mi-i-N)/Y 
40 Mi-i =( T.-: mod Y)-( -N 1 mod Y) mod Y 

73 WEH*Sa»fc^^*ft l m<08H*^. 

6tE«co»i^am^So 

[is*S83 mftmsm\z&^x. Y\zz*m&& 
it\mn&* fn#iz&^x. try h&m*?*>i>xism 
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#mtl>T. Ai-Bj-i £Mi-i-Nj ^swu 

ilfc!MIQ = A« B mod N&fiJ^bTv Mmrt 

X*Sn/tARtf«rtaRJ:DA- R mod Nfe«J*LT*20 

Ti =( Ti-i /Y + Ai-Bt ) +Mi 
Mi-i =((Ti-i /Y+ArBi 

So 

[0 0 0 1] 

«V>*«f*WfS (RSAPt^ I*3J7WHW9 * ft 
(DHi«ftt*a» I D-basedfc**** 

[0 0 0 2] 

[0003] ^sBfwsanic^viT, ^*s»a*si* 
[0004] *t\ wp**scfcwa««rt»3&sca:4iii 

£ * Vi OT^iT 0 RBEiltt fc b T&»*BP ft £ 

[0 0 0 5] Jfcjfc, Bi-oii«a«*ts««*«*fc 



R mod N£g&fbT 



Ai 

a # $ tat b r^mie r £ t> b ■ 

NBMUiJRAi , Bi KtfMBRUI^tt. At »Bi 
• R" 1 mod N£#&T*<B*&m£Tt tU 
«TET« ^^R^rCchDTj-R- 1 nod ■ N^SWU 

M^T« £#8&3Sa»£, Ai *tt*©«»vfc**W 
BBAi ©vtfyhawtfMH. Y = 2* iLT. 



N 

) mod Y)-( — N" 1 mod Y) mod Y 

[0006] K±o»«««p^*s:R^H««f 

Diiiie£Hellman fccfc*DHa«Eai^r jC3^«fc<«l6n 
^■CRKSffi- m^iUT ID-based 

(=S£S3) ^4t^5, cntcfc, *< 
[0008] K±<o«p^a«<o»iaifc^virttft»« 

(1986) &mt#M£, SUlEliSF "«r9fc««-Mra. 
[0 0 0 9] ftoT> 8^©Pi^VXfA^$J;<i 

[ooio] N&str*»3fc**ft«R*'r 

SJStIT, Nt*3^SSS:R^V>r?SJ|C*fTd^j* 

VE>3* y — S) (Montgomery, P. L. : "Modular mul t 
iplicatton without trial division, " Math, of Comp 
utation,Vol.44,1985.pp.519-521 ) Q=A- Bmod 
NCDftt>DICQ=A- B* R" 1 mod N&SJg-TSil 

[ooii] —if, Ml$sa^ltu< lo^St 



^7 



5f? 
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t v<i \^±^mm<^mmt. p e j*#G>j«jjrtt£*u 

VLSI «©*^WfiSC!>««ft&arftlC-r*7~* 

[0 0 12] -ten?* *B«Att, 5fclCft§i¥3-225986 

oT^^tXTVi^, ( Shimon Even: "Systolic mod 
ular multiplication, " Advances in Cryptology-CRYPT 
0' 90, pp. 619-624, Spr inger-Ve r 1 ag. ) 
[0 0 13] 

[0 0 14] ^VrJ^UH&fcllDJgUT^S* 

[0015] $&k<D ; e>3*y-mz®&-rz 

<fc^(rQ = A- B- R* 1 mod N<DSW*fx3«»«lC, 

[0 0 16] ttfc, _h»©-f y>07WKt. % 

R^-r^*J^^Q=T- R~ l mod N£#£fir?-<57 

^2@®^T*^feae)ic^d«jT«^-3^ 

[0 0 17] 



(4) ^¥5-3 2427 7 

[0 0 18] ±ft. **WO«©B»»4, ^>^U- 

[0 0 19] fr#Sll]Bfc*ftT*fcfcfc. 
fiL N£&<LTa£&A> B0?*J^fiCQ=A- B mod 

fc*T**«E»R&JBfr>-c, Z = U • V • R' 1 mod N 

[0020] #*m©te<D»«te,kn«» n«* 

t-r**BkM, efcBt^*»IR*«W: C=M« mo 
d NWWHtT, H«rt*0«»fcS^ttfl»*tr&3 
*^»#ttfc*SVVT\ A*^-*Uv VtC^lxT, N 
t*T**l»R€«^X, Z=U • V • R" 1 mod N 

a? [0021] **ni©«©j*«K:j:n«» Arts 

B mod N^bT, »«l**Ol*#fl:*£tta»fc 
HT, A;&$ftfcA&tfMfeR<fct>A- R mod K«K 

#bT*-«>tt*&Ai i«**iat, A#£n&B 

RtfiftfBR<fcDB- R mod N&S»UT-e©IS*«B 

i fc-rs«*xs^ mesimuRAi , b. rotmb 

RlCS:?*. At -Be • R~ l mod N&##T-£C&ttJ| 

St. t-rzmxxnt. meti tftiiBR^fc^sT 

i • R' 1 mod N*«WU *<D»*fcl/tQ**a** 
JlXStftfU fOTBT. t**«aWo:Sfc:, Ai €: 
ff»©«»vfcJ;5ttEAi ©vlfyhf©m Y = 
2' £UT> 

Ti =< Ti-i +Ai*Bi*Y+Mi-i*N)/Y 

Mi-i =( Tj-: mod Y)-( — N" 1 mod Y) mod Y 

[0 0 2 2] **§8«>««>J8»K:J;nK> A2r3 
nfc&RA. B^#*SNtfttb3fe»!l**»Q«A- 
B mod N£ffJ/BLT, »*lW<Dtf^fc*fcttflWfc 

V>T> A*Sn^A»tXIWBRJ;?)A- R mod K«jR 
»LT*<Ot8^*Ai ^-r-St^X^i:. A^3$tlfcB 
XrX^IBR^DB- R mod Nfc»a*LT*-«>»*£B 

i fc-rsaamBif. me^»»^a. . b» r^we 

R»w*^*, At -Br • R" 1 mod N«*»T-t©3lS* 

.•R-i mod NS^StU. bTQ£#fc*» 
KX«t**U MI2T. &*»*«»XetC, Aift 
ttK^>»jfcvlC4:*MKA« ©vtfy h#«>»»f* Y = 
«? 2' £LT> 



-782— 



(5) 



#OT5-3 24 2 7 7 



Ti =( Ti-i /Y + Ai-Bi ) +M, -N 

Mi-i =((Ti-i /Y + Ai-Br ) mod Y)-( — N" 1 mod Y) mod Y 
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[00 2 3] 

R&ffl^T, Z=U-V-R^aod N£35JfLTffi;*j 
1 O^JiCD^SfieiC^UT, At> R» =R S mod 
Nft*5£#:R& £*Artl/t\ Ar =A- Rr-R' 1 mod 
N£m#£i*r, Bt, ME^RR* h^XijLT. Bi 
= B- Rb-R- 1 mod NfcBttj^l^ to*;*n£ftrEA 
r titrlHBR t&A^JbT, Tr =Ar-Br • R" 1 mod 

LT> Ti-1- R" 1 mod N§Qtl/TttJ^j$tSut 
j|(E***JIQ«A- B mod -Nsswrr*. 

[0 0 2 4] A*5r-*U* VtC^UT. N<h3&T&£ 
SE»R£J8tr>T, Z=U • V • R^aod N**»UT 
U*T*10&±©S»«fc#LT, ML Rr =R j 
modNfc55£»RR ££A2lUT, Mr =M- Rr-R" 1 
modNSflWjSl^ e©2jt*S«e= [e«,e»- 1 ,-, 

e l ) it, Cj ®8MHtt&Ci =Ri • R" 1 modN£ 

lfcfcfctffc, ME^ItSBlCttLTCR chM. tSA* 
LT, Ci-Mi-R- 1 modN^ff^c^CR £UTtfi#£ 
14-, JElr, JttrEe 1 mSi^UD^tff: 
tt, «HQ»JHBK:»U-C2 0(DA*v f -^tUT*ICC 
r £A*UT, Cr-Cr-R' 1 mod N^SfofcftCi tV 

R-l-R-^mod N£ttJ;fi£ii:£;i£lc<fcg, ftrE^€T 
m^J^SC=M e mod NSr^lfT-r*. 

CO 0 2 5] A#^-*U, ViOttLT* N £.&V£>%> 
MRMV»T, Z=U-V-R- l mod N^SSlt 
UJ*-r*10£Jl±<Z>?fWa5fc»LT, M<h> Ri =R a 
modNfc£)g$:Ri t€rA^bT, Mi =M- Rr-R" 1 
modN£ffl;*j;*-i*\ e <Z> 2 it3?3g£ e = Ce'.e 1 " 1 ,-, 

e 1 ] tU C. OtOffltt&Ci =r».r-i modNt 
LT, M^teteHy hJ^cDe 1 Ottfot, e l = * 

Ti =( Ti-i /Y+Ai-Br ) +Mi-N 

Mt-i =«Ti-i /Y+Ai*Br ) mod Y)-( — N* 1 mod Y) mod Y 



30 



IT, Ci-Mr-R" 1 modN Cr tlsXthijZ 

it. M\Z, S9f3e l fc*5tt£ 1 t £D*ft*2:*& 
ft* tf[|2«|iC^JC»LT2^cr>A^5 ; -^a:LT^CM 
r &A*UT, Mr-Mr-R' 1 mod N&Srfc&Mi <hb 

WESW»K:»LTCi t5e»lt*A*UT, C = C 
■ •1- R _1 mod N&ffi^j^iir^CltfccfcD, l!trE^# 
^I^^»C=M e mod N*»x-r*. 

[0 0 2 6] A*S^«ftA» BCTtSN^L 
^3H^*J|EQ=A- B mod Nfc N£3tT&*&#R 
fcJBV*T* A^^n^ASi^filRcfcDA- R mod N 
&flWLT*<©*S**Ai tU AaSft&BfttWIHB 
RcfcOB- R mod Nfta*»UT*Ott*&Bi £U 
IliBmMIIXAi % Br RtfMERfc*:**, Ar-Br 
- R _1 mod NS*ftWO»*€Ti fcU A&ETr 
£i9BRfcK:«fcOTi-R- 1 mod N*iK*U 
£UTQ£#££J;5£U WETt 
Ai SttaS©«t»cvfc«t$ffifEAR ov^hW 
§|J> Y=2* tUT, 

Ti =( Ti-i +Ai*Br-Y+Mi-i-N)/Y 

Mi-i =( Ti-: nod Y)-( — N" 1 mod Y) mod Y 

[0 0 2 7] A^$nfcS»A, Bi:»t5NStttU 
fc»**«Q=A* B mod Nfc, N<hl£-C<fcS&$:R 
£/BV>T, A*$n&ARttt&ER«fcDA- R mod N 
SS»UT*©IS*ftAi A*3n&B&tfitrE 
R^OB* R mod N£S»LT*G>l»*£Bi tU 
«rE*»jfe*Ai , Br *tflMBRfc*CttN Ar-Br 
• R~ l mod Nfe*«>r*©IS*ftTi tU WETr 
tttrERt^^DTR-R- 1 mod NfclRffU *©*S* 
£UTQ£3R£5<fc5fc:U ttrETi £#a?>*«ff£, 
Ai ^tt^CD|g»v{Ccfc5^EAR <Z>vlfyh#<0# 
M, Y=2- itT, 



[0 0 2 8] 



5(7 



-To 

[0 0 2 9] (Wi/ArW **f, Kll^fn^n 
»C^ttS3B«SttD-*^xy7^y h^-^ (LAN) 

^mmm^m-. -^t, A-zisfiiM*-c*o. * 
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m&xtm&m. mmmmtsiEv>m*}mm£ft s z. 
xzz>. 

[0 0 3 0] :©A5&W8gTjHi^ t m&m 
T, ff&*fC=M e mod N€ffl**rs^«*J*SOnaIB 

®«®iff<oa^ % ishk<z>r* 

*IS«k:«kD. i&£»M = C< mod Nfc£oT®*|£fT* 

(T+M- N) /R=T- R" 1 mod 



i0 



^T, 3WA*»:Q = A* B mod N&mft?%m 
ft, N\ZMLX%X&%&fkR*m^X9:<D£5\Zl,X%( 



xmj»*HHHtm<D-»£vx* mnmw^vftm^ 

[0 0 3 2] ft >zt * U -OftMUn XOftWE 

>zt*o-\z*v xm&mt. 

[0 0 3 3] imi : N£R££WC*ft&#, T&fc 
gt©te&<hU N 1 =-N- 1 mod R£U M = T- 
N' mod R£?Z>£&* #<DBlS&£»J£-r£o 

[00 34] 
N (1) 

20 [00 3 5] 



A* 
Bi 
T 
Ti 

Q 



= A- 
= B- 
= Ai 
=T- 
= Ti« 



R mod 
R mod 
Bi 

R" 1 mod 
R' 1 mod 



N* (T+M 
N 



5* (4) , (5) OS«fc^>:f*y-CD*|jfc 

Ti =Ai -Bi -R* 1 mod N 

= (Ai-B» + M- N) /R 
JfcfcfU M=ArBrN' mod R 
^>=fyU-©3Rjfe**fc*^rN*XWR«)«-& ll R = 

S&K&*c Rfc£*l$imfc^hV:7b(D 
^T&tWT, « (5) £fctt5£ (7) <o*E>zt*v- 

[0 0 3 7] ^0tt, 5* (2) , (3) Rtf (6) © 

[00 3 8] 40 
At =A- R mod N =A- Ri*R-* mod N 
Bt =B» R mod N =B- Ri-R" 1 mod N 
Q =Ti-R- 1 mod N=Ti-l- R* 1 mod N 
fcfcU Ri =R 2 mod N 

INPUT M, e, N, R. 
Mi =M* Ri«R-* mod N 
C% = 1 • Ri-R- 1 mod N 
FOR i=t TO 1 
IF e» =1 THEN Ci 



(2) 
(3) 
(4) 

• N) /R (5) 
(6) 

[0036] 



(7) 
(8) 

R» \ZN\Z£^X-mzfetiZ>mXlbZ><DXs N££i& 

X, 02^-r<fc^lCZ=X • Y-R- 1 mod N€«tf 
T***lHr**JI!V>-C (2) - (6) 
\zmnx&, #&Z>m&m#: Q=A- B mod N*** 
»$n^o ®2«A:2?i& (A, R« ) , (B, Ri ) , 

<ai . Be ) , (Tt . i) \z#~r%mj]&&*A 
[0039] ft>^y-o^**»*«iH] * 

e mod N 3 fcLTjSfrStl*. 

[0 040] 



(9) 
(1 O) 



= Ci-MfR- 1 mod N (1 1) 
IF 1 >1 THEN Ci =C«-Ci-R- 1 mod N (12) 
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(7) 

11 
NEXT 

C=Crl- R' 1 mod N 
tCcfcoTUffT^^. fr*5, 5$ (10) fC^rCi 
ifeTts. c © «fc 5 K^e>:J* y -z>M&mM 

[0 0 4 1] uCT, &±<D£5\Z, =£>zf*V—<0'< 

CO 0 4 2] 3£ (7) <D*:>3*i)-<DM&m 

CO 0 4 33 5£3®2 : j£ (7) , (8) \Z&^XAi < 
2 8 + tt , B» <2 8 + tt , N<2» . R = 2 tt + ' tVftt 

u>l^or=u+l^^^-h^tr&^. 
CO 0 4 43 fE9i: 

R=2 B " LTZtZ: (8) iOM<2 1+r . 
Ai <2 B+B , Bi <2 B+ » , N<2 B t^Z>h, 
Ai-Bx <2 2 <» + ">, M- N<2 2 "'. 

At-Bi +M- N<max (2 2 <-+«> +1 , 2 2 "* r+1 ) . 
<fcoT, Ti <max (2 B * 2 - + -', 2 B+1 ) . 
1£oT, 2 B+2 '»* 1 '^2 a+1 Ortg^tTi <2» +l . 
.\ u=l, r>l (1 4) 30 

■\ u>l, r=u + 1 (1 5) 

££U max (A, B) «A, B0>35*€fV>#fc»S 

-rarest-?**. 

CO 0 4 53 ZKD££, SC (1 4) , (1 5) C0&#£ 

* > =f ^ U - ©fJM*©^^^ 0 £ U IC £ o T*S| 

fctf-C**. ft)*C, @3fc^1\fc5fc5S (9) 
- (13) \zftl,T-kl'??Slz£^TAJ]*miRTZ> 

[0 0 4 63 ft*3, ®3CDl§]#n?, 2-^coirk^^S 
ZOj^fc^ytt, 2^C0-fel^^^SCOMJC 

>iT*awifi*m>, ««*#*ta*rf*«»« so 



#^5-3 2427 7 
(1 3) 

(&m\5i&*%v>*&z\z£y>m&x%z>) *mim 

CO 0 4 73 Z.<Dt£, 5£ (1 4) , (1 5) V>3kfr* 

•TSCfc^T**. ^ (14) , (1 5) fcZ 

u>0X&Z><D-V, i(W«*T*aC«W»4, C<N£ 

[0 0 483 ^*©>r^>©^ftT«, rcD^^^JE 
IMC l**»»jE*ff Att*Vi. C©fi»iEtttt* 
#b&V>. 

CO 0 4 93 &>X*V—0*<*1IM&»*2) * 
^SSHBAWIE: C=M* mod Ntt*©*5fcl/T 

CO 0 5 03 

I NPUT M, e, N, Ri 
Mi =M* Ri-R' 1 mod N 
Ci =1- Ri-R- 1 mod N 
FOR i=l TO t 

IF e 1 =1 THEN Ci ^CfMi-R 1 mod 
N 

IF i <t THEN Mi =Mi-Mi-R- 1 mod 
N 

NEXT 

C = Ci- 1- R" 1 mod N 

Jioa^fe, S(14), (15) OstfrftflVmtt^ 
> rf ^ U -nm&m J?©*«^» DiBbfcJ:oTC39tiR 

0 3OI«IIS-C> 2 

^Oirl/^^S^n^nc. , M« £j8&«JtB£T£ 

CO 0 5 13 ^±fcJ:oT, ^^IMJAiSWROTW^ 
UtiW* (16) *&#T*t$»m6V>MZ&<oT$m'V 

CO 0 5 23 

Z=X^ Y« R" 1 mod N (1 6) 

«v^r«»rs«&fctt, * U4) , (i 5) o&ft 

CO 0 5 33 ^ (16) &Jt\*£ (7) 

5^ *<D»#®f&Rzttm*m*<o^mtz*vTm 
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[0054] ^t, ^ (i 6) &tt\m (7) &m?r 

[0 0 5 5] &>3*V—<DM&tt&Tt*it3ffl&* 
Ar =Ak-i*Y i - 1 +At-2-Y l -'+- 
Br =B.-i*X , - 1 +B«,-i'X > - s +" 
N =N.-i -X-- l +N.- a -X»" 8 +- 
Tr =T»-i*X» i +T a - 2 -X«- 2 +- 
Ai (l=0,-,k-l, n+u <i TAi =0) teAi 

Bi , N, , Tj (j=0, -Mtt-1) &&*Br , N, T. K 

T.ifiilsie^lfic^^^TR GDte£«#U jC (1 
6) fcfcttSTi t\tm?2;Z> 0 
[0 0 5 7] 

T_, =( Tj-i+ArBrY+Mi-rN)/Y (1 8) 
fcfcfU Mi-i =( T_.-i mod Y)-N»' mod Y, T 
_-i =0, Na^N'aod Y 

d<7)m»^^J^T^i-^fcee)^ B. , N£Bj 

[0 0 5 8] TAcfUXAl : 
FOR 1=0 TO k 
Mi-i =dw, (dw, (Ti-1,0 ) • No') 
FOR j=0 TO m-1 

Ri.i =Ti-i,i +Lt-t.i*x-X/ Y 2 +Y- Aj-Bj 
+Mi-i-Ni 

Lt.j =dw» (Ri.i ) 

Ti.j = (Ri,j -Li.j ) /Y 

NEXT 

NEXT 

tz.fi V. dw« (Z) =7 mod 2< 
up« (Z) = (Z-dw, (Z) ) /2* 
Tt.j , Li. i OfflHHIiteTO 



(8) ^W5-324 2 7 7 

♦ tM&CD^Jgm) Tr =Ar-Br-R- 1 mod N (Ai , 
Br <2»*' , R=2»*' , N<2» U, r 5$ 

(14), (15) <0&#£^fc~r) 
-5. AR^vtf^h^v Br , N, Tr ^dfcf^h^tC 

d, n+r^k- v, X=2< , Y=2' (v^d) . 
[0 0 56] 



Li-», j +i 
) -L»., 



?)Vzii)X2±l\Z&\<*X. Y- Ai-B, 
/ Y* , cfc^tfTi.j^ (dw d + , (Ri 

/y^<z>£&x=2' , y=2- iz&zm&atzttMDm 

T, Ti., fcH^SRJWiRi.j COLSBK^tbTvH 
y hl^Sd + v-l ey h B£T<£H1£T, . , <hT<5 
^i:$^-r^o Lt (1 ttRi.i CDLSB^e 

v~llfyh@^f^. £<D£5i;:Ti.i 
5fca6<Di/YifcJ££Ri, j 4*<7>T&^©Hy h 
K£oT£3gSLTlr>*<Z>T, Li-2,j.i ttRi.i Stag 
•TSfcSKffiVi&tt. X/ Y 3 fc<fcr>T*ff££frirC« 



20 



) 40 



•+Ai-Y+ Ao 
•+Bi-X+Bo 
•+Ni-X+ No 
•+Ti-X+To (17) 

[0 0 5 9] ®2«T;Pz/UXA *ff3I3»T**. 

1 fc*V»T 1 ttirDy > tt*U JttH 
SlC&tt^l^X* (R) ©«WIC»JSU 
Ri.o fr£Ri. B -i CDV^X^S^-Tp 
[0 0 6 0] j^T, fie^co^a&tcv^loJi^c^^T 

H2©©j»fc»fPfettWr*. EUfcfcWTBj , N 
i (j=0,-,o-l) JfttfNo'tt* »*fcE3ttfc«€**£ 

TSUa-CS*. N3ft««RT?*na, No' = lT<fcSCD 

-c, Mi-i s»«r*3iawtt*i»r€r, t,-i. 0 col 
J3&ZfMMt$:<D&5\zfcZ> 0 Tto<D§k9Wfr*><Dtito 

Nj lC»l/Tltf^h±(4«lC5/7hLrA»"r*. V 
^X^ecDA^Tt-i,, 13, Ri-i,, 0LSB)5^2 
fcfy h@#8£l tfy KFttfcS^hS*. Mi-i-N, 
£lf{fc<Z>te£bTA;trf*. Li-2.w2<- 1 «20Kl 
COPEt5^©1 tf*y hW*Li-2. i+iSMi-i-Ni OL 

Ti-i.i <2"* 2 T*n«, 

ttSP'vA^tt^d+atfy hV^A^t^So 
[0 0 6 1] ^±C9J;^^UT, S4CDIhI^T^ (1 
8) C0^»5Qt^fxT^, Ao ^SAk &HAJ)-?ZZ.t 

[0 0 6 2] @2ttv = ltlTrai» v 

^dT^^v^UTtj^OOT^lr^oT^e^^U 

[0 0 6 3] *«IS«fc**t>^U-0«l*»»@ 

[0 0 6 4] K>^^U-^M*SWfttf^«MN* 

■r^&»ir, Br , n^b, , n, *«v»r«-rfc* 

[0 0 6 5] TJUrfUX^2 : 
FOR i=0 TO k 

Mi-i =dVr (dVr (Tl-1.0 ) 

FOR J=0 TO m-1 



30 



No') 



50 
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15 

Ri.i = Ti-i,i +Ci # j-t+Li-i.j*i«X/ Y*+Y« A 
i-Bi +M»-i*Nj 

Li.j =(iWr (Ri.J ) 

Ti.j = (dWd +T (Ri.i ) -Li.i ) /Y 

Ct.j =up<i + t (Rt.j ) 

NEXT 

NEXT 

&«U dwd (Z) = Z mod 2- 
upd (Z) = (Z-dwi (Z) ) /2 d 

Ti.j , ci.i , Li.i <omnmt±xo 10 

7^UXA2te*^T» Ct.i-i WS±*tD4:LTR 
i.i «MCr«f«iCffi^>6tl«. Y- At-Bi , 

Li-s.j*i*X/ Y 2 , *J;tfTi.i = (dw d + , (R 
i.j ) -Li., ) /Y^COX, YftSRttT^SW 

So tot, Ti.i fcBTSlRiRSRi.i LSBIC^l 

[0 0 6 6] fcjISU Li., ttRi.i ©LSB^6v» 
ftOl/YWtRi.i &<DT&^<D¥y h^HC* 

[0 0 6 7] H5»7JWJXA2t^TR M , L 
i.i , Ti.i , Ci.i -5®»"C**. H6M 

SOBBSl^OPE (^Dt^»^-XW>M 

0 (#1) *^i=k (#k+l) (DPES^to 
[0 0 6 8] H6fc*V>T# I + l#@COPEK*Ai (i= 

&Bi»£B,«t , Di.i:Dp 0 i , TiitTa.i , Li.i: 

l..i , Mi.^Ma.t , Nj,tN„i s^*^»«$nr 

V>*. Sfc, #1CDPR<DBi., Ni.lCtt«-4rBi , N 
, (j=0,»sm-l) *tTtt*^6«JCA**tU D,», 
Ti., Li., Mi.cDA^fr«^0^ISf^^tlTV^ e 
[0 0 6 9] fiTF, v= 1 (D®&\Z^ 

Bft*U di(D7>Hia^T^tl?5o Rl-R 
3te&4Ai , M,-i , No* 1 fcfy bUVX 

PXlbZ. N#*f*T&ntf, No' = lT&£COT£:i& 

w-rss^stND'^ftw-r^Rattw^n, R2« 

Ti-i.o ©LSB&i: UTftKrTSo R4, R5 

ttBi., Ni.^^COA** 1 ^Dy^ii&13:T^CDPE 

*jAi-B, fedfcfy hTfeSsP. -^<Ofit£ 2 50 



#Kf5-324277 

fcMi-i •N, fcjttbT 1 Khtttfrfci/? hbTA* 
ttPE^60A*Ti-i,i fck Ri-i.i ©LSB 
j^f5 2 hgd^d + 1 tfy hS^TOdtfy b&l 
Vybymz^ybtt* Mi-i-N, £^&CD®£LT 
A2j*T£« Li-i.i*i-2«- a ti2OtaOPE^^0Qltf 
yh^Li-2.i + i ftMi-i-Ni cDLSB^Sd-lfcf 

tfyhmCi.i-:JiCi,i-i <2«*» T*tttt* In 
»S35>S09ffi*ttd+3tfy h&ft«6TP. Ci.i-i « 

SR 6 ttd + 3 M+j h 

CO 0 7 0} GLhfccfc^ 05<Z>PE l^TSt (1 8) 
©«J|CSS8ffTft*ii^*J^*. r0OPE£B6(O<fc 
5ICk+li/^^>ttfcjMl!U *ny*fcHJH 

$ -a-rftfp $ £ £ ^? y 
[oo7i] fc«u K6^rw^P)©Mj»ai*«k 

+ l#gCDPE#&CDfltfjTk.j Li.i k#@(DP 

E»6CDffl*Lk-i.io fc#»snTV>*<zn?, 7;p^f 
UXA2<Z>M3lCDgt *©J:^»:**€ff5. 
[0 0 7 2] : 
FOR j =0 TO m- 1 
Rk+i.i «Ti.itC»*i.i-i+Lfc-i,i*i«X/ Y 2 
Tk+i.j =dwd (Rk+i.i ) 
Ck+i.i =upi (Rk+i.i ) 
Tk*2.j =Tk+i. i + Ck+2. i -i+Lk, , + i • X/ Y 

Ck + 2.1 =UPd (Tk*2.l ) 

NEXT 

££T> Tk*2., tf*Ti &ftmi>1t\Zy bJ&mT\ (j=0, 
-,m-l) £UZ>. R»*i.j 0)at»tt7;WJXA2fc* 
V^TAi =Mi-i =0tL3fc»&«>«WfcH«-C**<D 
T, H SCDPEICcfctJTSI^^n^o Tk*2.i CD^S^f 
fc«Rk*i.i©SW£H«-C»*fl«, T k *i.i . C 
ttl/2S0*^fTt>tl-rLk.i*i t>Lk-i,i*x 
^l/T 1 fcfy h±^TJto»$neo S7ld^ 
-T* 5 ICB 5 CD P R CQi03S§§ t k^X^ R 6 CO L S B CO 
Tfcie»;h&CE)A-77^- (HA) tVyX^ (R 
7) fcJMU HAKttttPE<Z)itt*Ri.i,j (OLSB 
i:, Ck + 2.i-i ^A^3L (C(0^, Ck*a.i-i filfiS^l 

>?A^^> **U-lfy h$JP»B^<J!>^vy-tUT 

A^j-r^o nco<tdfc-rti«Lk., + i fctanniciey 

^±^CO^tLT»llS$nSo ^oT> Tk*i.i ^^[» 
t^PElittCDPEta^:^ 1 =k + 2(O^C0^iP 
»8g^©*^y-i:UTA-7T^-^&c0^vy-^ 

a«-r* i try hoD-ku^^smn^TcoPE^i 

[0 0 7 3] ffiot, Ti fcftafcttBBOPEilvT 
ES2 HMiniL^ff- k + 3 ficOP E Srffl VifeT U-f ICck 
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[0 0 7 4] H5RlXia7ttv=l £L,xmiV 

[0075] re >rf ;* y -©WAiiunfe^^fKHA 
®^ccfH3S^33 #<££5&5/Xhy y^7l^ 
fti«t*£i:*7**. ^(17) ©ad»^*<DJ:5 

fcrncf y XAKioT^fT-rs, 

[0 0 7 6] : 

FOR 1=0 TO k j<? 
Mi-! =dw T (df. (Ti-i,i ) • No') 
FOR j =0 TO m 

Ri.i =Tt- l>1 *i +Ci.j-i +Ai*Bj-i +Mi-i-N 
i 

Tt.J =d¥r (Ri,| ) 
Cl.J =UPr (Rl.J ) 

NEXT 
NEXT 

7WUXA4l:*WRi I i KM07)VzfVX&2£ 
<D&Wt, Mi-i-Ni#r*At -B, RtfTi-1,1 <3ffi a? 

[0 0 7 7] r;PrfUXA4 0Ri,i , T1.1 , Ci.j 

9 fc^To 7 ;v=r u xa 4 (D j , i fe^-n^n, 

i +lCDPEfc«Ai(i«0,«%k) ©«Wg«l^x*fc: 
RfiSnT*^ PE^ttBi.tB,., , Ti*£T SO 
ait , Mi.tM««i . Nt.<hN..t ^^SlRStlt^ 
#10PE©Tj., Mi.CDA*Jr«#^ o*t 
RSK^nrV^d^ Bi., Ni.lCtt6*Bi , Nj(j=0, 

uxAiowtsaoBj «Nj c^in^ny^ 

[0 0 7 81 fffi^C07t^{C v = d <D®^\Z-D^T 

WlW~r2>. ^8l:^T, xttdlfyh- dtfyh©* 
*B£*U +l4HUWft*T, talH§C9A;*J2&tfffl;*J 
i£*£>£5K:fc£o ±«<Z>*H«^6<Z)fflAAi -Bj-i 40 

h*e<&0, MPE^BoBIATi-mm ttdfcfyhOfil 
Sfot, Ci.i-i j&tCi.j-i <2 3 ''* 1 T&tl 
«Hn#*^&©m*142- d + 2tTy h<D«TC**. * 
fc, Rl-R7iidh!7h(?)^X^^r), ttftlft 
5(O^SSWR8}i2' d + 2fcfy hcOl^^X^T 
l^X^RSte, LSB^^d tTy h@£T£T 
1.1,1*1 (hLT&CDPE^ti^U ±&©d+2e>yh 

[0 0 7 9] 08T«Ni teBj KJt^Tl^Dy^lfl 50 



!^W5-3 24277 

I* 

£A:ft3ft*<E>TA!-Bi-i tMi-i-Nj 3&«RIWICSW 
Ti-i,jm fiAi-Bi-i JfctfMi-i-Ni 

£flWfcwrr*&«&K:* bid, Ni.^eA^sn^B 

, , Ni «2^n^^5l^$nT^OPE^tB*$n 
[0 0 8 0] 0 8C9PEtC«fcoTt>^; <1 7) 

[0 0 8 1] 08ttv = di:lTPJb^ v 

<dT**vtej#l/Tt>BI«©*afca:t>T ; E>^>iy 

[0082] re >rf * y -cr>»*^»»^^«!a* 
@»<d*1mh] ^JS^3f^u^r;vzfyxA 

4 S^ff^T -S^* Ai f^J5PEd)ll,W^S 
te&<, 01 OCDi^lCAi 6 Ai (i»0.-.k-l) ST 
fit«^6Ni fcHJBS1TrA*31i\ 011©<k5CA 
tat Ac. 1 feSF*LT*<0PE^-5«l«K:LTt>J; 
V> 0 d<D»3\ Ai(i=0,-,k-l) teBj (j=0,-,nrl) «fc 
1^ ny^$fciCA2>£ n5tf>T, # lOPElC^ 
TAo tfAaSftS^WKRlOl^X^teAo 

*rr*£, Ao *Bj (]=o, •••,in-i) sswmojfc* 
nt*0PEi:A^$n^^ ai ei^a^^i 

nfeV^CDT, #i-l©PEfc^ViTA. ifiBt (]=0, 

-.bi-1) <z>i»fcA*$n«»"Cfrfctr*i:, #icop 

ETteAfi #Bi(j=0,-,m-l) ©$rfCA#$n#J$T 
1*So ffiot, # i ©PE*C:fcV>T*&3Sfc< At + x-B 

1 a=o,-,iD-i) <Dm.m*$m-czz>. ^t, 

SWIM^^^ 5C^< 7 U XA 4 £0 1 
0, 1 i(DPE&mh'Jy^7Wl:J:oTt)Sa 

[0 0 8 3] re>rf ^ y -©»^»»rx^#*B^ 
H»©I?J6W5D ^>=f^y-a>^*WBAiWICttaC 

(1 7) ©fld*(Ol*DigUC«fcoT^TS*. 010 

1 0l:7RtfcPE^ (1 7) co^fiLSfr^ 
d<h^-c^^co-e> 01 2<n&?\z**:V tt*^ 

tl^, l^)CDPE$( 3- t/2 + 2)-qf5J (q {i^E> 

y -cD*b&*#7 k $»j«*rsfc«e)^si^p e 

C0»-C, 07(DPET«k + 3fi, mS, lOOWk 

-2 us) ffi^T^>r/^y-o^^i^»sfiL3ir 

#^>« fcU p<@<^PES:fflV^35:e^ ( 3- t/2 
+ 2 ) • q / p (5rO» 0 jgbT^: >zi * »J -<0^#^*J*S 

t*^^, PE<D»lci:^^j$S<z>^ib^^ 
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19 20 

[0084] ^t, hi 3\z7K-?&?umm{ti>*eim »Rtf*A»»HKspE»«T«jsrrntfj:^. -<z> 

\ZtzZ><, 013Jc:k^T* SYMC (Systolic Modular P EiCcfcSJHftJ«lifitffiIW^jlSRIW©»Bftt 

Exponent iat ion Chip) t^$nt^5©H pi©F tV^fe«r««5fe*>nrisF»ftU^t* FEfi 

sYMciiiHi»si«caaitt&'bt3OTSi«ft& [0093] vx^oPE^s^s/haJiajs 

wj^sy (symc^) jci:sps#s«**«cbfea^ watt 

[0 0 8 5] C*>^^U-OlBA3IUIt2kr^*3W^ [0 0 9 4] ljW»3/*^A«l*Lfcflre. 

XAT«l^^PETfT3fflS«fB¥*fiE««l»Ta5S KftJmtt*. M-©IellMtfcf4, PEOSftibft 

(o-v. PES»jir^^yfl:Ufe<Tt)a«o!>DSP j ^c H«coni»^J;oT*fji5-rsj:2:*n?€rs. zntt, * 

[0 0 8 6] ±SB*lK«tt^^ MJ**7W* 3? ft©lf y hftoav^fflaHftoav^CJI^Tfr^fc* 

^t>»m»T»*©T?vLs i \z&z>$zmfc\zTbmm t>, «»*«*o< Dse-r#K#fcv>. mrrs 

[0087] *it. ±e*««<DPE*««fc»i*&'r oscrrto^virtf^^x^rA^^-rswt^-e^ 

ny7^>^ttft#»K:*tjT«lllUT«h«MI2fetf^ [0 0 9 5] J6U:fl>J:5fc3MH4, «rK¥3-225986^T 

[0 0 8 8] Sfc, 05, 7&tfla8, lOOPEfa fcJ:*«-»««-CIA«31-e€r^V>t)©T**. ftot, 

(1 8) UT*frUT^S#, St (1 8) #«Mfc**^**SB**»RlW^»lHl»&t«f» 

sa^ic^u^s^siT^^^T^ftWfc* (is) ^ &m^zz£\z&^x&&vw&&<»&zft^XT& 

[0 0 8 9] *5SSH£5'XHJ y^TWlCcfco [0 0 9 6] #S¥3-225986^co->X h U 

ifl^il^^^fC^A/efe©^ imhUy>7H (7W 1) , **«2, 3 

PEtT^tfcT^*. ^->Xhy^^7H (7K2) tf>ttifc£fT5. 
[0 0 9 0] «Jbfc*oT3'XhUv*7W«B^fc [0 0 9 7] 7W 0BB«ftfWft»ia(*T-^ 

^^*^«t»R^^**(iIlS]&tf*SO«^^ (ROM^) fc*oT»MIWfcf?3**, 7l/-f 1, 2 

3*»*ft»^»*Mtt«»^X^A*«dtr*ti:3»« ^ 3ffi«lMT#^o Sfc, 7WL 2»ROM»«)**5r 
[0 0 9 1] Sa^PWi/XfA«Sft^, *&§B 7K0ttttU-eyhO» 

m&m&frtfm&mn®mm&uPE\z&zmwm& for, nu««©H«««i««^fc«ft, 7Wi. 

PE©{W»tPErtOiBi«rWtt»Br» 2I4TU^ OKWbTKflraWJBBWffA*. 
VT.SICgi^* £WC*oT\ ft [0 0 9 8] 71/< 1 147 W 0 fctt-^TPR© 

aftHf^AWiwsn^ afi»a<gi 7 ic*i/&j:5fcPE«*»fci/*t 

[0 0 9 2] S»j*tt*D , b/hieialKt«k ; B*9^ £Zt, 7 U*f 2 1 g£|<&P EO^TllWre**. 
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[0 0 9 9] 7W O^fJA^— ^WfcfflViT^ 

Wl, 2li7W 0<fcOfcifclfc&#iftV\, £ftfeL 7 

ti^ra$ns©T^7-^M)5:< ton* 
ssESfcotfy b&\zum*t£^o &jeu sarr*«E» 

«^«) fcfc, 7K0-7W2<!)J»ttttHW* 
ftlC#UT, 7H1, 2ti7W0^DMW^ 

for, twi. 2tmM?zte»<D\fy b&<o 

[oioo] a±<o^t^s, ±SB*teWfc^^igi^ 
&*t>/>*«:Er»T»iaK, fr^mmzmmx&z>*&^ 

[0 10 1] re>rf/U-<OHO*ffe^R^$«IO* 

iS, 5*t (1 8) tfeWTjtttftftD. 
T_i=( T_i-i/Y + A, -B R ) + Mi-N (1 9) 

fc£U Mi =((T_i-i/Y + Ai -Bi) mod Y)-No* 
mod Y, 

T_-i =0, No' =N* mod Y 

K, Bi , N£Bj , N, \ZftM\sX&<D£$\Z&-r. 

FOR i=0 TO k- 1 

FOR j =0 TO m-1 

St.! =Ti-i fJ /Y + At-Bj +C..1-1 

Mi =dw, (dir. (Si.o ) • No') 

Ri.j -Si. j +Mi*Nj + Li- i ,i* l 'X 

Li.j =dw T (Ri.j ) 

Ti.j =dWd + » (Ri.j ) —Li,j 

Ci.j =up<t+f (Ri.j ) 

NEXT 

NEXT 

fcjKU dWd (Z) =Z mod 2- 
upd (Z) = (Z-dw (Z) ) /2< 

Ti.i , en , li.j <ommmt£xo 
r;iv=f»jXA5jc^T> C..J-! uffi±&vtvxs 

i.j £Stif?5&fcAIt>&ftS« Li-i,j+i«X, 
*5<*tfT,-i,, /Y^COX, Y&&&tLX*>-?W&f}Z 
t&tofflzMVXVy h&rS*-£fcfc*oT*«T!# 
So fct, Ti.i fcWr*«»*Ri.i 0>LSBfc*t 
LTv fcfy hg^e d + v- 1 tfy hgSTOtt^T 
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i,j ^-r^^ii^^t-So £:*:b, L.,, teRi.j £> 
LSB;fr£v-lHy ha£T£Hr?&£« EO.fcSfc 

y h^>:7HC<fcoTll^LT^a<Z)T. Li-1,1.1 teR 
t.i atJM"afc*fcJBV>&*U XtCcfcoTffi^fciirT 

[0 10 2] T^rfUXASiC^^Ti^^leJS:, J 

fcV>©lASi.i WRi.j <D&X$>K> (Li.j , T 

i<? i.j , Ci.j u\fy h^y b<D&xmmt<rLZ>) > s 
uj RtXRi.i }i*oHfi«aawcj:oTS^*n*. 

[0 1 033 

f =d/y + a- b + c- x (2 0) 

£*!L, yte2' Sfctel, xte2' &ft\*l 

x, ytetfy h$/7h©ti^OT, j£ (2 0) 

Hi 4ic«rPEk:*Qrswc**. 

[0 10 4] «T» Bmofcfctev-lO^fcOVvr 
B14«>iaiK&nffftR9] a r«. HUfc^TXBJH 

# aWTSl tfy hWX^Tfc*. SI. S2ttA 
*d, c^y^^^xtc^-pTlfy h^^h^^^^f 

tfc- x ©Jp»*fT^ f SSSW-TS. R2WnlHM»6 
©HI**«flf«V^^t»*. BUfcJ^T, 01 
4CDPETA (2 0) #!»T£S 
CO 1 0 5] r;P=fUXA5©*WR4Hl 5 

© «k 3 fcB 1 4 <Z>P E £ 2 tm*£*>im«*«2>* 21 £ 
fc«U BlSOBii, Ni.fc«#*Bj . 
30 Nj(j=O t »Mrl) ^T{&^6MStCA^SnSt*r^. 
£<0*£\ £CDPE?Si.iaWRff«n, *C0PE-CR 

fcftf** N.'^ltteD* Si. 9 OLSBM. £fc 

0, *CDPE<DUi?X*R 1 K«&£ft£o R 

1. j fctCi.j . Ti.j , Li.j IZttMZnX&yjkZftX 
Vs*. J:oT, 01 5*k^^Jt«01 4©PE*2- 

T^^o «±^S, 01 4<DPE^^oTSC (19) & 

40 [0 10 6] ^fc, 014, 15«v=ltbtrai 

[0107] >rf U -<DW***3fe^#*«I* 
IMteO^M^i7] ^^>XhU5/^7W 
^P^t-^^^^T^s. (14) <DmW&#i<D£5 

TJiVzfUXA6 : 
FOR 1=0 TO k 
50 FOR j=0 TO m 
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Si. j =T»-i,j*i +up* (Su 1-1 ) +At»Bi 

Mi =dw, (dw. (Si.o ) • No') 

Ri.j =dw, (Si, j ) +upr (Ki.i-i ) +Mi-Ni 

Tt.j =dVr (Ri.j ) 

NEXT 

NEXT 

(19) OT.-i /Y^kfyhtnm<, ^D>^ 

co io 8] y;i/^uXA6^ff*r^PERr/->xh 

T*. H17CDBi. v Ni.fclMHrBi , Ni(j = 

PEtmsu #st*s*u ^copek^tr 

[0110] £fc, 016, 17ttv = dtUTRWl/ 

[oiii] re >rf * u - ©«i3fe*j»&^tr*3MA 
(i 9) 08&<DmoMuz&vTmfre&%>* hi 4 

&tf01 6tea*l/fcPEtt5S (1 9) CDSW&ff5Ct 
tf, 1^CDPE£( 3- t/2 + 2)-QlHl ( Q «qe>rf 
fTC, 014CDPET&2- k<@, 016COPET&2 

•(k+D m> m^x*>3*v-<D*&$m&is&t& 

t / 2 + 2 ) • q / p ®<Z>i|© D l/T^ >d> U -CD*** 
[0 112] ft^T, 01 9fc^fJ:5^»fift*^I|g 



(13) #§8^5-3 242 7 7 
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iZfoZ. 01 9K35^TMEC (Modular Bxponentiati 
on Chip ) t«*nTV^*©tt, pfi©PE$a^ 

2 + 2)-qT&ntfffirr?&*a>T, ffitcDE&smo 
^t^, mmmm\zMKc<Dmzttmi>TMmit 

T#££>T* 0 7f^Tci:^fCMEC^ffi»ffi^n^<k 
V>, £<Dm&, &MEC<DmW&r?7&\ZI&VX&X- 

\zmLx%z>o 

[oii3] re >x * u - a>«i***»^€rfii*!i* 

i»ia»©*®«®*lSW] *S§gmc£SyjK*UXA 
T?tt 1 OOP ETff ^fflflP.tt«*fe«Ufc«KT?**© 
T» PE^JiC^!y^U^<Tfe5i^cODSP^CP 

co 1 1 4] sfc, *«^ttm»»^aflfj«nr»o» 

[0 115] ^ 014, 1 6 0PE£&^:fc-l*:fc: 

^si^PEi vxmacr z> z. t h *imx&z>o 

[0 116] J^±^J;oTPE^ffiVifc^m*i^m» 

[0117] jeiaftw^x^M^, 

0;S^€^fll*«ffRlX«!l^m*l5r»$ V L S I 
[0 118] Watt*Dt>/hfiIil»CJ;^Bl«^ 

HrftL^-rvi. PErt-cfft>n*«»ttfB*tt«[ 

40 S P^©V 7 bW^ta^TfeflW^i/XfA 
[0 119] VKort^PE 5 /hSIlHlPS 

(mec^s) \z£*m^mm*mmi,it&v* i&mm* 
&&t&?x*>mi 9<o&*>\z. *<D/m®#&&ikm 
\,>nK®mmmzttmLfc&mfcit>mmx&&. 
x, #%mM&ftr>\&'rzL£tsi<. ®&&m^xff<f* 
itx&mz&ci±ft»{t*mmzft&zitti'XT&& 
$mx$%. 

[0 12 0] l^^VX^A€:«)&b^*T?, 

so fttisXTi*<n^*mttib\z9»ir&mR<D]dy h 
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0 ia T z t <d ft v> *m x 5r a SMta £ £ #t * 

So 

[0 12 1] EU:©.k5fc8MM;k tt*ttlCtt9UK« 

^Ji^o Tm^T^^tto % s nm Is* 7- A sumst s 

CO 1 2 2] 

Z=X- Y- R" 1 mod N (16) 

[0123] ^n^>rf^u-o»j*^» 

Z=X- Y- R' 1 mod N 
= (X- Y+S- N) /R 
TcfcV. S=X • Y • N' mod N 

So 

[0 12 4] &^fc^3m£E*«lf?&ScDT, 
*O«J|t0»3WB*te«ilT* S J: 3 fcfco fc. 
[0 12 5] «£^T, AXOttffiaKfttf^ttfeJ:? 

[0 12 6] *^fflJr«fcS^>^U-coa**JHHK 
[0 12 7] *JlBC«l:5^h , Jy^7WS»^fc 

So 

[0 12 8] HjS^^^X^A^H^^, 

HJ^^SL&^PJ^^gLimK^ffi^^ P E «c <fc SJUMftjfi 
PEO«»2:PErta>iS3g«fRI«»BfW 
TfcSCOT, VLSIlCilT^o ZtllZ^X. K 

Mkm^x^p- a***M63 ns c 

[0 12 9] XHUDfcDUiO/MWIsM 



(14) ^5-32427 7 

z<d&&*> % PBiz&zmMmmtmwtmmmmvm 
ErtTff^nsm»^fe^^ia:?tffT^soT, *ss 

Wfc «fc*SWfWttC P U^D S P*0V7 h 

So 

[0 13 0] V><t3^©PE*^^:S/jN^I5lK 
(SYMC® ^i:SP8r#^fi&«lJ^bfcS^ XXtt 

zl-v. m^mzu:Misftmmik&3mc&z. 
x. &^mw*&°o%i<mfz\zftQm'rzi:tiL<* m& 
sbxff < fcnx&mzj&vtz&mt&mmzfT 

[0 13 1] BK««(£:afll@ft«fll»«Ch^- 
^'>XtA©M (#^i£*rrsfe£&) £ii&fcSfc 

ftfcisjit-rsstftcoify h»*#ai3it-*»&fc, 

a? ^sfcaa. h— PE<D»^iiL3t^«i<z) 
ms^^«fc^T*fis:-rsiii:^"cirSo tot, z<d® 

[0 13 2] fot, *«9JfcJ;S^*a«jfelBWRtX 

[01] UP^S/^^ASfflViSaWPRCDiBdtW^t-H 
5(7 T&S. 

[0 2] *«Wfc«fc*«l**JHHr»a>«*^rH'C* 

So 

T&So 

[0 4] nmmvM*mxmm&7u9ir*amv* 

So 

[05] ^ISfllCDPE Wntr»?' xw>H 
£^*f0T£So 

[0 6] 0 5©PE^^yXh'Jy^7K S^T 
40 0T&S, 

[0 7] #»bPE*5isTHT**. 

[0 8] «<0|QS«<DPE£^0-e&S« 

[09] H 8 OP E MVi&yX h U y ^7 W 
0T&S. 

[010] «OSOS«OPE«^rHT»*. 

[01 1] 01 0OPE6fflnmhUy^7M& 

[012] pew*u fta*-&t>*fciHia 

[013] SYMC€fflVifc^#**lAaaCRtfl|IJA* 
50 g|en»£^"r0Tc&So 
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(15) 



^5-3 2427 7 



[014] $m&l2<DFE&7F'?m-e&Z>* 

[01 5] 01 4OPE£fflV>fclsI&£^T0T&a, 

[018] 01 7©Hi^i:^ ; eU&3®^'&^^:lBj^Sr 

[019] MECSffi ^^^**W*SWXtf 
lsI&&£5jV3"0T?&5 o 



S, SL -trU** 
R, Ri W>X* 

+ in#sg 

Bi 
Ni 

PE ^Dty»^'XV'^>h 

MEC '<Zm%l&&£l>3 L y7 

SYMC 5/*HJ :y£^**H&8B*^y:7 



10 



[01] 



T 

A B 



[02] 

Z = X - Y • R 1 mod N 




Q, Tr, Bb, A r 



[03] 



[01 3] 



1 - 



Z=X*Y-R- 1 mod N 




CONTROL 



— c 




ft-* 


PE 




PE 


B^ 


PE 


0 — 


#1 


X 


#2 


^ 


#m+ 1 


0 — 




M 




M ^ 




N,— 




_N 




_N ^ 





SYMC 



RAM 



[014] 



p 




P 


£ 




B 



SYMC 
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(16) 



#RW5-3 242 7 7 



[04] 



R.. 



Ri» 



- + 



N„-, 



Bm-1 




B, 








Be 



I 



R 



N. 

I 



— R 



Ti-i. « 



No 



No' 



[05] 



Mi- 1 
[01 6] 



A, 



D fa - 

T„ ■ 

U ■ 

Mb 
N ta 



R4 



Rl 



R6 



x 

I 



R2 



R3 



R5 



Doul 

" Tout 

■ Un 




[01 9] 



CONTROL 



Noct 



I MEC 




t i 
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(17) 



5-324277 



0 — 
0 — 
0 — 
0 — 



PE 
#1 



_B 

X 
_L 

M 

N 



PE 
#2 



X. 

M 
N 




— T*, 



[07] 



R4 



D h ■ 



Rl 



SL 



HA 



x 

R3 



R6 



R7 



R2 



N to 



R5 



-No* 
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(18) 



W5-3 242 7 7 



[08] 



B ta 



T ta 



Mia 



Rl 



+ 

I 



R5 



R4 



R8 



x 

I 



— K2 



R3 



R7 R6 



•Mm 



[01 0] 




Moat 
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(19) 



W5-324277 



[011] 



A,— 


PE 




PE 


A 


PE 






_B 




B ^ 




0 — 


#1 


X 


#2 


T 


#m+l 






M 




M i 








21 









B, — 





[HI 2] 


Ai (i = 


0, — , m - 1) 
1 


a. 


PE 


T to 




M„ 




N h 






II 5] 



Cin 

N ta - 



Rl 



SI — + — 



S2 



R2 



M 



S2 



SI 



Rl 



R2 



•—Loo, 
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(20) 



#B8¥5-3 2 4 2 7 7 



[01 7] 




mi 8] 



A* (i - 0, m - 1) 






B,„ PEs 






T to Toot 
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